Sandbox

Hello Joomla fans,

I come to extensions page today, to look for some common modules, and when I click on the “My Page” link, one of my own extension does not appear…

My extension was a component, to manage content workflows, called oWorkflows : Google cache page


I try first to look for it in the search module, but no references are found. They are no more stuff about it.
Did some extensions admin delete it? I don’t understand what append with it.

I would like to now how many times an extension is valid, and how I can found back this one?

Thanks for answer

Christophe

Hi Christophe,

We unpublished your extension yesterday due that we have received a report saying that your extension may have a vulnerability. You'll soon receive an email with more information from us.

Thanks Lorenzo for this answer

I does not know that a vulnerability was found on this component, and I will correct it ASAP when I will know more.

Christophe

Christophe.
I contacted opware yesterday and he told me he was mailing to you.

JM

BTW: he also took it off from joomlagora while you see what's going on.

Hello all,

I just publish a secured version of the component oWorkflows, and of its plug-ins.

They are no new features, I just modify some files call, to completely remove $mosConfig_absolute_path references. I also verify all SQL queries, to be sure that it can’t be possible to make injections.

After all, I does not understand how hackers pass thru the “defined( '_VALID_MOS' ) or die” instructions...

Can you republish this extension, to allow me to inform all users that new secured version is available?

Hi Ccrosaz,

Good to know that a secured version is available. I will republish your extension in a moment

Thanks to you ot2sen

Done 

Extension can be found here:
http://extensions.joomla.org/component/ ... Itemid,35/